tilt icon indicating copy to clipboard operation
tilt copied to clipboard

Forwarding from privileged ports (< 1024) not possible without sudo

Open tamer-hassan opened this issue 4 years ago • 7 comments

The docs don't mention anything about port-forwarding from privileged ports on the host. That is, ports less than 1024... On MacOS, for example, I get error in Tilt logs that it could not forward from either ports 80 / 443 (http / https) , but with no clue as to why.. Of course, I figured I have to run tilt up with sudo, and now it works, but I'm afraid of side effects of that.

It could be possible to only elevate privileges when port forwarding from a port < 1024, such as with launchd (for MacOS). See: https://developer.apple.com/library/archive/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html#//apple_ref/doc/uid/TP40002589-SW4 Would be a nice feature to have.

tamer-hassan avatar Jul 25 '19 15:07 tamer-hassan